$ rpki-client -vvf rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft File: pXN62XE221PCG287HU13Hc1XMTo.mft (raw, json) Hash identifier: LoaXpcdhDYxr8uEpbyMLbS84js1iZ7iRZ8IVHxqNs4c= Subject key identifier: 80:0A:43:E2:EC:00:FE:9C:42:77:84:B9:FC:F6:78:A1:53:13:9E:B7 Authority key identifier: A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A Certificate issuer: /CN=A9146F33/serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A Certificate serial: 03E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft Manifest number: 03D9 Signing time: Sat 31 May 2025 00:47:43 +0000 Manifest this update: Sat 31 May 2025 00:47:43 +0000 Manifest next update: Sat 07 Jun 2025 00:47:43 +0000 Files and hashes: 1: pXN62XE221PCG287HU13Hc1XMTo.crl (hash: F1dPlYsma0ttDoRQ5AcJ4TwcoQKFsxfsPVLMAV8Hq2U=) 2: EE23EF6E857B11ECA3F32D50C4F9AE02.roa (hash: ABrIq2phc9urb6rkViq/Ir7haK/5vojTJpbzqSfLFQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 992 (0x3e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146F33, serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A Validity Not Before: May 31 00:47:43 2025 GMT Not After : Jun 7 00:47:43 2025 GMT Subject: CN=683a51af-fc38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ac:d7:76:1a:2b:42:ee:7f:bd:73:62:ce:b2: b2:42:d1:a6:8b:df:05:62:dd:ac:6f:3d:b0:4e:61: 45:eb:11:cd:2f:97:c0:99:75:bf:7f:ac:ca:89:9c: 8f:47:4e:04:06:50:13:bc:fb:54:f4:3d:8e:42:7a: ee:bd:2b:1a:3c:55:dc:4a:18:d6:43:66:7a:e9:a5: 4b:50:41:79:a3:d9:43:e8:52:27:09:02:a6:f6:ae: 25:22:95:58:0d:b1:81:e5:cb:87:cf:03:99:97:c9: fa:64:7d:af:37:ac:fb:f6:88:8b:e2:cd:ed:94:4b: b7:9e:85:48:fb:3d:3a:ff:f2:a2:4f:c6:a0:16:a4: d4:b9:3f:00:07:78:e9:8a:c7:28:c6:06:df:5f:b7: 66:01:ab:a2:d7:47:98:c0:9a:be:14:8d:f7:85:1b: 66:32:f8:6f:cd:6f:80:77:43:80:73:cc:4a:c6:4a: 9c:01:f8:b2:14:5b:19:6b:29:56:0e:cb:92:01:78: 12:1c:04:d2:c4:e1:31:08:8c:6e:9a:03:db:1b:19: 6b:e2:71:ad:23:ce:65:8f:b7:76:f5:97:2a:fe:ce: 02:3b:bf:d6:ac:cf:c4:76:7d:c1:b6:1e:9a:27:35: b5:0e:0b:4c:8e:b8:6a:1b:85:ce:7c:ec:fe:93:88: 67:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:0A:43:E2:EC:00:FE:9C:42:77:84:B9:FC:F6:78:A1:53:13:9E:B7 X509v3 Authority Key Identifier: keyid:A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:d7:17:3d:e9:6f:93:ed:a4:bd:a9:ff:1c:97:18:ad:b4:11: aa:3f:9e:fb:1e:13:5c:1d:40:eb:6f:91:c3:90:3a:a7:d5:ed: 99:9d:17:3b:5a:1e:27:c4:1f:75:50:7f:8e:46:c3:5a:e7:da: c4:13:ca:ca:e9:92:c2:9a:39:18:ac:c5:e3:f9:6e:35:7c:f9: 05:ef:b7:5a:8f:4c:42:60:ff:63:22:9d:11:87:fc:19:38:4b: dc:3e:3d:b2:b9:b0:ab:2c:d2:f2:a2:ef:28:fd:c1:1b:94:77: 42:06:d9:11:7e:e3:cc:72:5f:c5:28:23:b3:d4:1c:08:04:cd: a3:80:42:d1:ad:ed:42:f6:ed:d9:14:f6:02:00:29:69:75:98: 95:2a:d5:b6:1c:f4:d0:ea:c7:e3:90:56:d0:38:36:22:db:b7: a5:bc:d7:06:85:75:a7:7a:a6:35:f6:51:27:a5:3f:ac:90:d7: a6:c2:02:19:f2:9f:51:af:e8:16:25:26:df:a3:15:a0:9c:35: 3a:3d:2d:e2:65:40:b7:ea:5b:33:12:fa:2f:89:9d:0f:d1:5b: ef:79:48:17:e7:e7:ed:93:70:b7:58:57:bd:16:d7:e8:21:b8: b8:d5:24:97:2d:9a:22:ac:91:83:ac:2f:18:2b:b7:7e:1d:07: 87:48:1a:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZGMzMxMTAvBgNVBAUTKEE1NzM3QUQ5NzEzNkRCNTNDMjFCNkYzQjFENEQ3NzFE Q0Q1NzMxM0EwHhcNMjUwNTMxMDA0NzQzWhcNMjUwNjA3MDA0NzQzWjAYMRYwFAYD VQQDEw02ODNhNTFhZi1mYzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqzXdhorQu5/vXNizrKyQtGmi98FYt2sbz2wTmFF6xHNL5fAmXW/f6zKiZyP R04EBlATvPtU9D2OQnruvSsaPFXcShjWQ2Z66aVLUEF5o9lD6FInCQKm9q4lIpVY DbGB5cuHzwOZl8n6ZH2vN6z79oiL4s3tlEu3noVI+z06//KiT8agFqTUuT8AB3jp iscoxgbfX7dmAaui10eYwJq+FI33hRtmMvhvzW+Ad0OAc8xKxkqcAfiyFFsZaylW DsuSAXgSHATSxOExCIxumgPbGxlr4nGtI85lj7d29Zcq/s4CO7/WrM/Edn3Bth6a JzW1DgtMjrhqG4XOfOz+k4hnPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIAKQ+Ls AP6cQneEufz2eKFTE563MB8GA1UdIwQYMBaAFKVzetlxNttTwhtvOx1Ndx3NVzE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkYzMy9CMTY1QkI4QTg1 MTExMUVDQjlEMzM1N0NDNEY5QUUwMi9wWE42MlhFMjIxUENHMjg3SFUxM0hjMVhN VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BYTjYyWEUyMjFQQ0cyODdIVTEzSGMxWE1Uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkYzMy9CMTY1QkI4QTg1MTExMUVDQjlEMzM1N0NDNEY5QUUwMi9wWE42MlhFMjIx UENHMjg3SFUxM0hjMVhNVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU1xc96W+T7aS9qf8clxittBGqP577HhNcHUDrb5HDkDqn1e2ZnRc7 Wh4nxB91UH+ORsNa59rEE8rK6ZLCmjkYrMXj+W41fPkF77daj0xCYP9jIp0Rh/wZ OEvcPj2yubCrLNLyou8o/cEblHdCBtkRfuPMcl/FKCOz1BwIBM2jgELRre1C9u3Z FPYCAClpdZiVKtW2HPTQ6sfjkFbQODYi27elvNcGhXWneqY19lEnpT+skNemwgIZ 8p9Rr+gWJSbfoxWgnDU6PS3iZUC36lszEvoviZ0P0VvveUgX5+ftk3C3WFe9Ftfo Ibi41SSXLZoirJGDrC8YK7d+HQeHSBpe -----END CERTIFICATE-----Generated at Sat May 31 16:36:47 2025 by rpki-client